Patch 1.15.1 . DeepSeek token pattern improvement. #3888

	# This workflows will upload a Python Package using Twine when a release is created
	# For more information see: https://help.github.com/en/actions/language-and-framework-guides/using-python-with-github-actions#publishing-to-package-registries

	name: Publish to PyPi

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	release:
	types: [ released ]

	permissions:
	contents: read

	jobs:
	deploy:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
	with:
	ref: ${{ github.event.pull_request.head.sha }}

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 - 2026.01.22
	with:
	python-version: "3.10"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install --requirement requirements.txt
	pip freeze
	python -m build
	twine check dist/*
	find dist -name "*.whl" -exec unzip -d dbg {} + # dbg
	find dbg -name METADATA -type f -exec cat --number {} +

	- name: Publish
	if: ${{ 'release' == github.event_name }}
	uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70 # v1.12.3
	with:
	user: __token__
	password: ${{ secrets.PYPI_PASSWORD }}

Provide feedback